| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Nach Neustart von Windows 7 keine Aktionen (Maus+Tastatur) mehr möglich! Allerdings kein Freeze!Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
31.05.2014, 14:39
| #1 |
| |  Nach Neustart von Windows 7 keine Aktionen (Maus+Tastatur) mehr möglich! Allerdings kein Freeze! Hallo, Ich habe ein sehr ärgerliches Problem. Ich habe einen Lenovo Laptop gekauft und wollte die vorinstallierte Norton AntiVirus Version durch AntiVir mit Comodo FIrewall ersetzen. Bei dem Deinstallationsprozess habe ich mir wahrscheinlich Schadsoftware und Viren eingefangen!  Ich habe das zunächst dadurch bemerkt, dass sich ein Programm namens PrivDog eingenistet hat. Dieses habe ich zunächst durch die Software Revo Uninstaller versucht zu deinstallieren. Das ging auch soweit ganz gut und habe auch alle Registry Einträge gelöscht... Jedenfalls habe ich beim Erneuten Neustarten das Problem, dass ich meine Maus nicht mehr bewegen kann und ebenfalls keinerlei Aktionen mehr durchführen kann. Allerdings ist das system nicht hängengeblieben. Die Firewall meckert irgendwas zwischendurch und die Systemzeit läuft auch weiter.Bin jetzt gerade im abgesicherten Modus. Da scheint noch alles zu funktionieren (Maus + Tastatur)... Wie verfahre ich am besten jetzt weiter? Antivirscan läuft gerade in diesem Moment... DANKE! Edit: Virenscan ergab keine Treffer im abgesicherten Modus FRST Logfile: FRST Logfile: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 30-05-2014
Ran by DerRobag (administrator) on MINIME on 31-05-2014 15:27:25
Running from C:\Users\DerRobag\Downloads
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Safe Mode (with Networking)
==================== Processes (Whitelisted) =================
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [TpShocks] => C:\Windows\system32\TpShocks.exe [382248 2013-05-10] (Lenovo.)
HKLM\...\Run: [LENOVO.TPKNRRES] => C:\Program Files\Lenovo\Communications Utility\TPKNRRES.exe [293672 2013-06-14] (Lenovo Group Limited)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3011312 2013-06-11] (Synaptics Incorporated)
HKLM\...\Run: [AcWin7Hlpr] => C:\Program Files (x86)\Lenovo\Access Connections\AcTBenabler.exe [63832 2014-03-14] (Lenovo)
HKLM\...\Run: [COMODO Internet Security] => C:\Program Files\COMODO\COMODO Internet Security\cistray.exe [1275608 2014-03-25] (COMODO)
HKLM-x32\...\Run: [331BigDog] => C:\Program Files (x86)\USB Camera\VM331STI.EXE [552960 2013-05-15] (Vimicro)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642816 2013-06-23] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [PWMTRV] => rundll32 C:\PROGRA~2\ThinkPad\UTILIT~1\PWMTR64V.DLL,PwrMgrBkGndMonitor
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-05-10] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Lenovo Registration] => C:\Program Files (x86)\Lenovo Registration\LenovoReg.exe [4315872 2011-06-01] (Lenovo, Inc.)
HKLM-x32\...\Run: [Fastboot] => C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBConsole.exe [733936 2013-07-03] (Lenovo)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [737872 2014-05-09] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [tvncontrol] => C:\Program Files (x86)\Common Files\COMODO\GeekBuddyRSP.exe [2327248 2014-05-05] (Comodo Security Solutions, Inc.)
HKU\S-1-5-21-2462734624-1699265906-3523415636-1000\...\MountPoints2: {ee7f1c7d-ce89-11e3-86f9-806e6f6e6963} - Q:\LenovoQDrive.exe
Lsa: [Notification Packages] scecli C:\Program Files\ThinkPad\Bluetooth Software\BtwProximityCP.dll
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk
ShortcutTarget: Bluetooth.lnk -> C:\Program Files\ThinkPad\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Start GeekBuddy.lnk
ShortcutTarget: Start GeekBuddy.lnk -> C:\Program Files\COMODO\GeekBuddy\launcher.exe (Comodo Security Solutions, Inc.)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://lenovo13-comm.msn.com/?pc=LNJB
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://lenovo13-comm.msn.com/?pc=LNJB
HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.lenovo.com/welcome/thinkpad
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.lenovo.com/welcome/thinkpad
SearchScopes: HKLM - DefaultScope {28085B94-4EFC-48C3-A556-3D3FD389A07D} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=LNJB
SearchScopes: HKLM - {28085B94-4EFC-48C3-A556-3D3FD389A07D} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=LNJB
SearchScopes: HKLM-x32 - DefaultScope {28085B94-4EFC-48C3-A556-3D3FD389A07D} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=LNJB
SearchScopes: HKLM-x32 - {28085B94-4EFC-48C3-A556-3D3FD389A07D} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=LNJB
SearchScopes: HKCU - DefaultScope {28085B94-4EFC-48C3-A556-3D3FD389A07D} URL =
SearchScopes: HKCU - {28085B94-4EFC-48C3-A556-3D3FD389A07D} URL =
BHO: PrivDog Extension - {FB16E5C3-A9E2-47A2-8EFC-319E775E62CC} - C:\Program Files\AdTrustMedia\PrivDog\1.8.0.15\trustedads.dll (AdTrustMedia)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
FireFox:
========
FF ProfilePath: C:\Users\DerRobag\AppData\Roaming\Mozilla\Firefox\Profiles\xm7uu5g5.default
FF Plugin-x32: @nitropdf.com/NitroPDF - C:\Program Files (x86)\Nitro\Pro 8\npnitromozilla.dll (Nitro PDF)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: PrivDog - C:\Users\DerRobag\AppData\Roaming\Mozilla\Firefox\Profiles\xm7uu5g5.default\Extensions\PrivDog@AdTrustMedia.com.xpi [2014-05-31]
FF Extension: Adblock Plus - C:\Users\DerRobag\AppData\Roaming\Mozilla\Firefox\Profiles\xm7uu5g5.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-05-31]
==================== Services (Whitelisted) =================
S2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160 2014-05-09] (Avira Operations GmbH & Co. KG)
S2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160 2014-05-09] (Avira Operations GmbH & Co. KG)
S2 CLPSLauncher; C:\Program Files (x86)\Common Files\COMODO\launcher_service.exe [70864 2014-05-05] (Comodo Security Solutions, Inc.)
S2 CmdAgent; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [6812400 2014-03-25] (COMODO)
S3 cmdvirth; C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe [2264280 2014-03-25] (COMODO)
S2 DragonUpdater; C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe [2135232 2014-05-21] ()
S2 FastbootService; C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBService.exe [140016 2013-07-03] (Lenovo)
S2 GeekBuddyRSP; C:\Program Files (x86)\Common Files\COMODO\GeekBuddyRSP.exe [2327248 2014-05-05] (Comodo Security Solutions, Inc.)
S2 LENOVO.TVTVCAM; C:\Program Files\Lenovo\Communications Utility\vcamsvc.exe [187688 2013-06-14] (Lenovo Group Limited)
S2 Lenovo.VIRTSCRLSVC; C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe [136288 2012-08-10] (Lenovo Group Limited)
S2 NitroDriverReadSpool8; C:\Program Files\Common Files\Nitro\Pro\8.0\NitroPDFDriverService8x64.exe [230408 2013-06-17] (Nitro PDF Software)
S3 SUService; C:\Program Files (x86)\Lenovo\System Update\SUService.exe [24120 2014-02-21] ()
==================== Drivers (Whitelisted) ====================
S2 APXACC; C:\Windows\System32\DRIVERS\appexDrv.sys [219360 2013-04-18] (AppEx Networks Corporation)
S2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [112080 2014-05-09] (Avira Operations GmbH & Co. KG)
S1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130584 2014-05-09] (Avira Operations GmbH & Co. KG)
S1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-05-09] (Avira Operations GmbH & Co. KG)
S3 bcbtums; C:\Windows\System32\drivers\bcbtums.sys [170200 2013-03-27] (Broadcom Corporation.)
S1 CFRMD; C:\Windows\System32\DRIVERS\CFRMD.sys [37976 2013-05-07] (Windows (R) Win 7 DDK provider)
R1 cmderd; C:\Windows\System32\DRIVERS\cmderd.sys [23168 2014-03-25] (COMODO)
S1 cmdGuard; C:\Windows\System32\DRIVERS\cmdguard.sys [738472 2014-03-25] (COMODO)
R1 cmdHlp; C:\Windows\System32\DRIVERS\cmdhlp.sys [48360 2014-03-25] (COMODO)
R0 Fastboot; C:\Windows\System32\DRIVERS\fastboot.sys [56048 2013-07-03] (Windows (R) Win 7 DDK provider)
S1 HMD; C:\Windows\System32\DRIVERS\hmd.sys [14888 2013-10-07] ()
R1 inspect; C:\Windows\System32\DRIVERS\inspect.sys [105552 2014-03-25] (COMODO)
S3 RSP2STOR; C:\Windows\System32\DRIVERS\RtsP2Stor.sys [288840 2013-03-29] (Realtek Semiconductor Corp.)
S3 TVTI2C; C:\Windows\System32\DRIVERS\Tvti2c.sys [40248 2011-05-29] (Lenovo Information Product(ShenZhen China) Inc.)
S3 tvtvcamd; C:\Windows\System32\DRIVERS\tvtvcamd.sys [27432 2011-12-08] (ThinkVantage Communications Utility)
S3 vm331avs; C:\Windows\System32\Drivers\vm331avs.sys [1049984 2013-05-01] (Vimicro Corporation)
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-05-31 15:27 - 2014-05-31 15:27 - 00009026 _____ () C:\Users\DerRobag\Downloads\FRST.txt
2014-05-31 15:27 - 2014-05-31 15:27 - 00000000 ____D () C:\FRST
2014-05-31 15:26 - 2014-05-31 15:26 - 02066944 _____ (Farbar) C:\Users\DerRobag\Downloads\FRST64.exe
2014-05-31 11:49 - 2014-05-31 11:49 - 00000000 ____D () C:\Users\DerRobag\AppData\Local\CrashDumps
2014-05-31 11:25 - 2014-05-31 11:25 - 00000000 ____D () C:\Users\DerRobag\AppData\Roaming\PwrMgr
2014-05-31 11:14 - 2014-05-31 11:14 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\DerRobag\Downloads\nw_20672_revosetupexe.exe
2014-05-31 11:14 - 2014-05-31 11:14 - 00001279 _____ () C:\Users\DerRobag\Desktop\Revo Uninstaller.lnk
2014-05-31 11:14 - 2014-05-31 11:14 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-05-31 11:03 - 2014-05-31 11:03 - 00000000 ____D () C:\Users\DerRobag\AppData\Local\Tvsukernel
2014-05-31 10:58 - 2014-05-31 11:00 - 00000000 ____D () C:\Users\DerRobag\AppData\Roaming\DAEMON Tools Lite
2014-05-31 10:56 - 2014-05-31 10:57 - 00000000 ____D () C:\ProgramData\DAEMON Tools Lite
2014-05-31 10:55 - 2014-05-31 10:55 - 13429504 _____ (Disc Soft Ltd) C:\Users\DerRobag\Downloads\DTLite4491-0356.exe
2014-05-31 10:07 - 2014-05-31 10:07 - 00001870 _____ () C:\Users\Public\Desktop\COMODO Firewall.lnk
2014-05-31 10:07 - 2014-05-31 10:07 - 00000000 ____D () C:\Windows\System32\Tasks\COMODO
2014-05-31 10:06 - 2014-05-31 10:06 - 00048392 _____ (COMODO CA Limited) C:\Windows\SysWOW64\certsentry.dll
2014-05-31 10:05 - 2014-05-31 11:28 - 00000000 ____D () C:\Program Files (x86)\AdTrustMedia
2014-05-31 10:05 - 2014-05-31 10:07 - 00000000 ___SD () C:\ProgramData\Shared Space
2014-05-31 10:05 - 2014-05-31 10:05 - 01700352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdiplus.dll
2014-05-31 10:05 - 2014-05-31 10:05 - 01060864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc71.dll
2014-05-31 10:05 - 2014-05-31 10:05 - 00000000 ____D () C:\ProgramData\Adtrustmedia
2014-05-31 10:05 - 2014-05-31 10:05 - 00000000 ____D () C:\Program Files\AdTrustMedia
2014-05-31 10:04 - 2014-05-31 10:15 - 00002024 _____ () C:\Users\Public\Desktop\GeekBuddy.lnk
2014-05-31 10:04 - 2014-05-31 10:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Comodo
2014-05-31 10:04 - 2014-05-31 10:06 - 00057096 _____ (COMODO CA Limited) C:\Windows\system32\certsentry.dll
2014-05-31 10:04 - 2014-05-31 10:05 - 00000000 ____D () C:\Program Files\COMODO
2014-05-31 10:04 - 2014-05-31 10:05 - 00000000 ____D () C:\Program Files (x86)\Comodo
2014-05-31 10:04 - 2014-05-31 10:04 - 00001131 _____ () C:\Users\Public\Desktop\Comodo Dragon.lnk
2014-05-31 10:04 - 2014-05-31 10:04 - 00000000 ____D () C:\Users\DerRobag\AppData\Local\Comodo
2014-05-31 10:04 - 2014-05-31 10:04 - 00000000 ____D () C:\ProgramData\Comodo Downloader
2014-05-31 10:02 - 2014-05-31 10:07 - 00000000 ____D () C:\ProgramData\Comodo
2014-05-31 09:59 - 2014-05-31 09:59 - 00000000 ____D () C:\Users\Public\Lenovo
2014-05-31 09:58 - 2014-05-31 10:00 - 230532264 _____ (COMODO) C:\Users\DerRobag\Downloads\cfw_installer_7.0.exe
2014-05-31 01:45 - 2012-06-03 00:19 - 02428952 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2014-05-31 01:45 - 2012-06-03 00:19 - 00701976 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2014-05-31 01:45 - 2012-06-03 00:19 - 00057880 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2014-05-31 01:45 - 2012-06-03 00:19 - 00044056 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2014-05-31 01:45 - 2012-06-03 00:19 - 00038424 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2014-05-31 01:45 - 2012-06-03 00:15 - 02622464 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2014-05-31 01:45 - 2012-06-03 00:15 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2014-05-31 01:44 - 2012-06-02 15:19 - 00186752 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2014-05-31 01:44 - 2012-06-02 15:15 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2014-05-31 01:43 - 2014-05-31 15:27 - 00000000 ____D () C:\Users\DerRobag\AppData\Local\Temp
2014-05-31 01:43 - 2014-05-31 01:44 - 00000257 _____ () C:\Users\DerRobag\AppData\Roaming\AbsoluteReminder.xml
2014-05-31 01:43 - 2014-05-31 01:43 - 00000020 ___SH () C:\Users\DerRobag\ntuser.ini
2014-05-31 01:43 - 2014-05-31 01:43 - 00000000 _SHDL () C:\Users\DerRobag\Vorlagen
2014-05-31 01:43 - 2014-05-31 01:43 - 00000000 _SHDL () C:\Users\DerRobag\Startmenü
2014-05-31 01:43 - 2014-05-31 01:43 - 00000000 _SHDL () C:\Users\DerRobag\Netzwerkumgebung
2014-05-31 01:43 - 2014-05-31 01:43 - 00000000 _SHDL () C:\Users\DerRobag\Lokale Einstellungen
2014-05-31 01:43 - 2014-05-31 01:43 - 00000000 _SHDL () C:\Users\DerRobag\Eigene Dateien
2014-05-31 01:43 - 2014-05-31 01:43 - 00000000 _SHDL () C:\Users\DerRobag\Druckumgebung
2014-05-31 01:43 - 2014-05-31 01:43 - 00000000 _SHDL () C:\Users\DerRobag\Documents\Eigene Musik
2014-05-31 01:43 - 2014-05-31 01:43 - 00000000 _SHDL () C:\Users\DerRobag\Documents\Eigene Bilder
2014-05-31 01:43 - 2014-05-31 01:43 - 00000000 _SHDL () C:\Users\DerRobag\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-05-31 01:43 - 2014-05-31 01:43 - 00000000 _SHDL () C:\Users\DerRobag\AppData\Local\Verlauf
2014-05-31 01:43 - 2014-05-31 01:43 - 00000000 _SHDL () C:\Users\DerRobag\AppData\Local\Anwendungsdaten
2014-05-31 01:43 - 2014-05-31 01:43 - 00000000 _SHDL () C:\Users\DerRobag\Anwendungsdaten
2014-05-31 01:43 - 2014-05-31 01:43 - 00000000 ____D () C:\Users\DerRobag\AppData\Local\Absolute_Software
2014-05-31 01:43 - 2014-05-31 01:43 - 00000000 _____ () C:\Windows\firstboot.dat
2014-05-31 01:43 - 2014-05-30 19:47 - 00000000 ____D () C:\Users\DerRobag
2014-05-31 01:43 - 2014-04-28 06:35 - 00000000 ____D () C:\Users\DerRobag\AppData\Roaming\Macromedia
2014-05-31 01:43 - 2009-07-14 06:54 - 00000000 ___RD () C:\Users\DerRobag\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-05-31 01:43 - 2009-07-14 06:49 - 00000000 ___RD () C:\Users\DerRobag\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Users\Default\Vorlagen
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Programme
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\ProgramData\Vorlagen
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\ProgramData\Startmenü
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\ProgramData\Microsoft\Windows\Start Menu\Programme
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\ProgramData\Favoriten
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\ProgramData\Dokumente
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Dokumente und Einstellungen
2014-05-30 20:34 - 2014-05-30 20:34 - 00000000 ____D () C:\Users\DerRobag\AppData\Roaming\Avira
2014-05-30 20:32 - 2014-05-30 20:32 - 00002081 _____ () C:\Users\Public\Desktop\Avira Control Center.lnk
2014-05-30 20:32 - 2014-05-30 20:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-05-30 20:32 - 2014-05-30 20:32 - 00000000 ____D () C:\ProgramData\Avira
2014-05-30 20:32 - 2014-05-30 20:32 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-05-30 20:32 - 2014-05-09 11:16 - 00130584 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2014-05-30 20:32 - 2014-05-09 11:16 - 00112080 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2014-05-30 20:32 - 2014-05-09 11:16 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2014-05-30 20:22 - 2014-05-30 20:28 - 137314600 _____ () C:\Users\DerRobag\Downloads\avira_free_antivirus_de_642.exe
2014-05-30 19:53 - 2014-05-30 19:53 - 00000000 ____D () C:\Users\DerRobag\AppData\Roaming\Mozilla
2014-05-30 19:53 - 2014-05-30 19:53 - 00000000 ____D () C:\Users\DerRobag\AppData\Local\Mozilla
2014-05-30 19:52 - 2014-05-30 19:52 - 00001174 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-05-30 19:52 - 2014-05-30 19:52 - 00001162 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-05-30 19:52 - 2014-05-30 19:52 - 00000000 ____D () C:\ProgramData\Mozilla
2014-05-30 19:52 - 2014-05-30 19:52 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-05-30 19:52 - 2014-05-30 19:52 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-05-30 19:49 - 2014-05-31 10:02 - 00000000 ____D () C:\Users\DerRobag\AppData\Local\LSC
2014-05-30 19:49 - 2014-05-30 19:49 - 00000000 ____D () C:\Users\DerRobag\AppData\Local\Adobe
2014-05-30 19:48 - 2014-05-30 19:48 - 00000000 ____D () C:\Users\DerRobag\Documents\Bluetooth-Exchange-Ordner
2014-05-30 19:48 - 2014-05-30 19:48 - 00000000 ____D () C:\Users\DerRobag\AppData\Local\Broadcom
2014-05-30 19:47 - 2014-05-30 19:48 - 00000000 ____D () C:\Users\DerRobag\AppData\Roaming\Adobe
2014-05-30 19:47 - 2014-05-30 19:47 - 00058016 _____ () C:\Users\DerRobag\AppData\Local\GDIPFONTCACHEV1.DAT
2014-05-30 19:47 - 2014-05-30 19:47 - 00001436 _____ () C:\Users\DerRobag\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-05-30 19:47 - 2014-05-30 19:47 - 00000000 ___RD () C:\Users\DerRobag\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-05-30 19:47 - 2014-05-30 19:47 - 00000000 ___RD () C:\Users\DerRobag\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-05-30 19:47 - 2014-05-30 19:47 - 00000000 ____D () C:\Users\DerRobag\AppData\Roaming\Lenovo
2014-05-30 19:47 - 2014-05-30 19:47 - 00000000 ____D () C:\Users\DerRobag\AppData\Roaming\Leadertech
2014-05-30 19:47 - 2014-05-30 19:47 - 00000000 ____D () C:\Users\DerRobag\AppData\Local\VirtualStore
2014-05-30 19:47 - 2014-05-30 19:47 - 00000000 ____D () C:\Users\DerRobag\AppData\Local\Lenovo
==================== One Month Modified Files and Folders =======
2014-05-31 15:27 - 2014-05-31 15:27 - 00009026 _____ () C:\Users\DerRobag\Downloads\FRST.txt
2014-05-31 15:27 - 2014-05-31 15:27 - 00000000 ____D () C:\FRST
2014-05-31 15:27 - 2014-05-31 01:43 - 00000000 ____D () C:\Users\DerRobag\AppData\Local\Temp
2014-05-31 15:26 - 2014-05-31 15:26 - 02066944 _____ (Farbar) C:\Users\DerRobag\Downloads\FRST64.exe
2014-05-31 13:01 - 2014-04-28 15:14 - 00710744 _____ () C:\Windows\system32\perfh007.dat
2014-05-31 13:01 - 2014-04-28 15:14 - 00151984 _____ () C:\Windows\system32\perfc007.dat
2014-05-31 13:01 - 2009-07-14 07:13 - 00006204 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-05-31 12:54 - 2014-04-28 06:06 - 01448955 _____ () C:\Windows\WindowsUpdate.log
2014-05-31 12:51 - 2014-04-28 06:37 - 629145600 ___SH () C:\Windows\lenovo_fastboot.img
2014-05-31 12:48 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-05-31 12:48 - 2009-07-14 06:51 - 00044692 _____ () C:\Windows\setupact.log
2014-05-31 12:28 - 2010-11-21 05:47 - 00740948 _____ () C:\Windows\PFRO.log
2014-05-31 11:49 - 2014-05-31 11:49 - 00000000 ____D () C:\Users\DerRobag\AppData\Local\CrashDumps
2014-05-31 11:32 - 2009-07-14 06:45 - 00034208 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-05-31 11:32 - 2009-07-14 06:45 - 00034208 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-05-31 11:32 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-05-31 11:28 - 2014-05-31 10:05 - 00000000 ____D () C:\Program Files (x86)\AdTrustMedia
2014-05-31 11:28 - 2014-04-28 06:40 - 00000000 ____D () C:\ProgramData\Norton
2014-05-31 11:27 - 2013-02-11 20:28 - 00000000 ____D () C:\Program Files\Windows Journal
2014-05-31 11:27 - 2010-11-21 09:06 - 00000000 ____D () C:\Windows\SysWOW64\winrm
2014-05-31 11:27 - 2010-11-21 09:06 - 00000000 ____D () C:\Windows\SysWOW64\WCN
2014-05-31 11:27 - 2010-11-21 09:06 - 00000000 ____D () C:\Windows\SysWOW64\sysprep
2014-05-31 11:27 - 2010-11-21 09:06 - 00000000 ____D () C:\Windows\SysWOW64\slmgr
2014-05-31 11:27 - 2010-11-21 09:06 - 00000000 ____D () C:\Windows\SysWOW64\Printing_Admin_Scripts
2014-05-31 11:27 - 2010-11-21 09:06 - 00000000 ____D () C:\Windows\system32\winrm
2014-05-31 11:27 - 2010-11-21 09:06 - 00000000 ____D () C:\Windows\system32\WCN
2014-05-31 11:27 - 2010-11-21 09:06 - 00000000 ____D () C:\Windows\system32\slmgr
2014-05-31 11:27 - 2009-07-14 07:37 - 00000000 ____D () C:\Windows\DigitalLocker
2014-05-31 11:27 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files\Windows Sidebar
2014-05-31 11:27 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files\Windows Photo Viewer
2014-05-31 11:27 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files\Windows Defender
2014-05-31 11:27 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files\DVD Maker
2014-05-31 11:27 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files (x86)\Windows Sidebar
2014-05-31 11:27 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files (x86)\Windows Photo Viewer
2014-05-31 11:27 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2014-05-31 11:27 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\Setup
2014-05-31 11:27 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\oobe
2014-05-31 11:27 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\MUI
2014-05-31 11:27 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\migwiz
2014-05-31 11:27 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism
2014-05-31 11:27 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\com
2014-05-31 11:27 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\sysprep
2014-05-31 11:27 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\Setup
2014-05-31 11:27 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\oobe
2014-05-31 11:27 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\MUI
2014-05-31 11:27 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\migwiz
2014-05-31 11:27 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\Dism
2014-05-31 11:27 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\IME
2014-05-31 11:27 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Common Files\System
2014-05-31 11:26 - 2010-11-21 09:06 - 00000000 ____D () C:\Windows\system32\Printing_Admin_Scripts
2014-05-31 11:26 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\com
2014-05-31 11:25 - 2014-05-31 11:25 - 00000000 ____D () C:\Users\DerRobag\AppData\Roaming\PwrMgr
2014-05-31 11:16 - 2014-04-28 06:35 - 00000000 ____D () C:\Program Files (x86)\Adobe
2014-05-31 11:14 - 2014-05-31 11:14 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\DerRobag\Downloads\nw_20672_revosetupexe.exe
2014-05-31 11:14 - 2014-05-31 11:14 - 00001279 _____ () C:\Users\DerRobag\Desktop\Revo Uninstaller.lnk
2014-05-31 11:14 - 2014-05-31 11:14 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-05-31 11:03 - 2014-05-31 11:03 - 00000000 ____D () C:\Users\DerRobag\AppData\Local\Tvsukernel
2014-05-31 11:02 - 2014-04-28 06:35 - 00000000 ____D () C:\Windows\System32\Tasks\Lenovo
2014-05-31 11:02 - 2014-04-28 06:18 - 00000000 ____D () C:\Program Files\Lenovo
2014-05-31 11:00 - 2014-05-31 10:58 - 00000000 ____D () C:\Users\DerRobag\AppData\Roaming\DAEMON Tools Lite
2014-05-31 10:57 - 2014-05-31 10:56 - 00000000 ____D () C:\ProgramData\DAEMON Tools Lite
2014-05-31 10:55 - 2014-05-31 10:55 - 13429504 _____ (Disc Soft Ltd) C:\Users\DerRobag\Downloads\DTLite4491-0356.exe
2014-05-31 10:24 - 2014-04-28 06:32 - 00065536 _____ () C:\Windows\system32\spu_storage.bin
2014-05-31 10:15 - 2014-05-31 10:04 - 00002024 _____ () C:\Users\Public\Desktop\GeekBuddy.lnk
2014-05-31 10:15 - 2014-05-31 10:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Comodo
2014-05-31 10:15 - 2009-07-14 05:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
2014-05-31 10:07 - 2014-05-31 10:07 - 00001870 _____ () C:\Users\Public\Desktop\COMODO Firewall.lnk
2014-05-31 10:07 - 2014-05-31 10:07 - 00000000 ____D () C:\Windows\System32\Tasks\COMODO
2014-05-31 10:07 - 2014-05-31 10:05 - 00000000 ___SD () C:\ProgramData\Shared Space
2014-05-31 10:07 - 2014-05-31 10:02 - 00000000 ____D () C:\ProgramData\Comodo
2014-05-31 10:07 - 2010-11-21 04:50 - 00000000 ____D () C:\Users\Administrator
2014-05-31 10:06 - 2014-05-31 10:06 - 00048392 _____ (COMODO CA Limited) C:\Windows\SysWOW64\certsentry.dll
2014-05-31 10:06 - 2014-05-31 10:04 - 00057096 _____ (COMODO CA Limited) C:\Windows\system32\certsentry.dll
2014-05-31 10:05 - 2014-05-31 10:05 - 01700352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdiplus.dll
2014-05-31 10:05 - 2014-05-31 10:05 - 01060864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc71.dll
2014-05-31 10:05 - 2014-05-31 10:05 - 00000000 ____D () C:\ProgramData\Adtrustmedia
2014-05-31 10:05 - 2014-05-31 10:05 - 00000000 ____D () C:\Program Files\AdTrustMedia
2014-05-31 10:05 - 2014-05-31 10:04 - 00000000 ____D () C:\Program Files\COMODO
2014-05-31 10:05 - 2014-05-31 10:04 - 00000000 ____D () C:\Program Files (x86)\Comodo
2014-05-31 10:04 - 2014-05-31 10:04 - 00001131 _____ () C:\Users\Public\Desktop\Comodo Dragon.lnk
2014-05-31 10:04 - 2014-05-31 10:04 - 00000000 ____D () C:\Users\DerRobag\AppData\Local\Comodo
2014-05-31 10:04 - 2014-05-31 10:04 - 00000000 ____D () C:\ProgramData\Comodo Downloader
2014-05-31 10:02 - 2014-05-30 19:49 - 00000000 ____D () C:\Users\DerRobag\AppData\Local\LSC
2014-05-31 10:02 - 2014-04-28 14:58 - 00000000 ____D () C:\ProgramData\Lenovo
2014-05-31 10:01 - 2014-04-28 06:35 - 00000000 ____D () C:\Windows\Downloaded Installations
2014-05-31 10:00 - 2014-05-31 09:58 - 230532264 _____ (COMODO) C:\Users\DerRobag\Downloads\cfw_installer_7.0.exe
2014-05-31 09:59 - 2014-05-31 09:59 - 00000000 ____D () C:\Users\Public\Lenovo
2014-05-31 09:59 - 2014-04-28 06:33 - 00000000 ___HD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lenovo ThinkVantage Tools
2014-05-31 09:57 - 2014-04-28 06:18 - 00000000 ____D () C:\Program Files (x86)\Lenovo
2014-05-31 01:46 - 2012-10-01 21:26 - 00000000 ____D () C:\Windows\Panther
2014-05-31 01:46 - 2012-10-01 21:26 - 00000000 ____D () C:\SWTOOLS
2014-05-31 01:44 - 2014-05-31 01:43 - 00000257 _____ () C:\Users\DerRobag\AppData\Roaming\AbsoluteReminder.xml
2014-05-31 01:43 - 2014-05-31 01:43 - 00000020 ___SH () C:\Users\DerRobag\ntuser.ini
2014-05-31 01:43 - 2014-05-31 01:43 - 00000000 _SHDL () C:\Users\DerRobag\Vorlagen
2014-05-31 01:43 - 2014-05-31 01:43 - 00000000 _SHDL () C:\Users\DerRobag\Startmenü
2014-05-31 01:43 - 2014-05-31 01:43 - 00000000 _SHDL () C:\Users\DerRobag\Netzwerkumgebung
2014-05-31 01:43 - 2014-05-31 01:43 - 00000000 _SHDL () C:\Users\DerRobag\Lokale Einstellungen
2014-05-31 01:43 - 2014-05-31 01:43 - 00000000 _SHDL () C:\Users\DerRobag\Eigene Dateien
2014-05-31 01:43 - 2014-05-31 01:43 - 00000000 _SHDL () C:\Users\DerRobag\Druckumgebung
2014-05-31 01:43 - 2014-05-31 01:43 - 00000000 _SHDL () C:\Users\DerRobag\Documents\Eigene Musik
2014-05-31 01:43 - 2014-05-31 01:43 - 00000000 _SHDL () C:\Users\DerRobag\Documents\Eigene Bilder
2014-05-31 01:43 - 2014-05-31 01:43 - 00000000 _SHDL () C:\Users\DerRobag\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-05-31 01:43 - 2014-05-31 01:43 - 00000000 _SHDL () C:\Users\DerRobag\AppData\Local\Verlauf
2014-05-31 01:43 - 2014-05-31 01:43 - 00000000 _SHDL () C:\Users\DerRobag\AppData\Local\Anwendungsdaten
2014-05-31 01:43 - 2014-05-31 01:43 - 00000000 _SHDL () C:\Users\DerRobag\Anwendungsdaten
2014-05-31 01:43 - 2014-05-31 01:43 - 00000000 ____D () C:\Users\DerRobag\AppData\Local\Absolute_Software
2014-05-31 01:43 - 2014-05-31 01:43 - 00000000 _____ () C:\Windows\firstboot.dat
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Users\Default\Vorlagen
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Programme
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\ProgramData\Vorlagen
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\ProgramData\Startmenü
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\ProgramData\Microsoft\Windows\Start Menu\Programme
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\ProgramData\Favoriten
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\ProgramData\Dokumente
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Dokumente und Einstellungen
2014-05-31 01:42 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Default
2014-05-31 01:42 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Windows NT
2014-05-30 20:34 - 2014-05-30 20:34 - 00000000 ____D () C:\Users\DerRobag\AppData\Roaming\Avira
2014-05-30 20:32 - 2014-05-30 20:32 - 00002081 _____ () C:\Users\Public\Desktop\Avira Control Center.lnk
2014-05-30 20:32 - 2014-05-30 20:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-05-30 20:32 - 2014-05-30 20:32 - 00000000 ____D () C:\ProgramData\Avira
2014-05-30 20:32 - 2014-05-30 20:32 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-05-30 20:28 - 2014-05-30 20:22 - 137314600 _____ () C:\Users\DerRobag\Downloads\avira_free_antivirus_de_642.exe
2014-05-30 19:57 - 2014-04-28 06:43 - 00000000 ____D () C:\Windows\System32\Tasks\TVT
2014-05-30 19:53 - 2014-05-30 19:53 - 00000000 ____D () C:\Users\DerRobag\AppData\Roaming\Mozilla
2014-05-30 19:53 - 2014-05-30 19:53 - 00000000 ____D () C:\Users\DerRobag\AppData\Local\Mozilla
2014-05-30 19:52 - 2014-05-30 19:52 - 00001174 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-05-30 19:52 - 2014-05-30 19:52 - 00001162 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-05-30 19:52 - 2014-05-30 19:52 - 00000000 ____D () C:\ProgramData\Mozilla
2014-05-30 19:52 - 2014-05-30 19:52 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-05-30 19:52 - 2014-05-30 19:52 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-05-30 19:49 - 2014-05-30 19:49 - 00000000 ____D () C:\Users\DerRobag\AppData\Local\Adobe
2014-05-30 19:48 - 2014-05-30 19:48 - 00000000 ____D () C:\Users\DerRobag\Documents\Bluetooth-Exchange-Ordner
2014-05-30 19:48 - 2014-05-30 19:48 - 00000000 ____D () C:\Users\DerRobag\AppData\Local\Broadcom
2014-05-30 19:48 - 2014-05-30 19:47 - 00000000 ____D () C:\Users\DerRobag\AppData\Roaming\Adobe
2014-05-30 19:47 - 2014-05-31 01:43 - 00000000 ____D () C:\Users\DerRobag
2014-05-30 19:47 - 2014-05-30 19:47 - 00058016 _____ () C:\Users\DerRobag\AppData\Local\GDIPFONTCACHEV1.DAT
2014-05-30 19:47 - 2014-05-30 19:47 - 00001436 _____ () C:\Users\DerRobag\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-05-30 19:47 - 2014-05-30 19:47 - 00000000 ___RD () C:\Users\DerRobag\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-05-30 19:47 - 2014-05-30 19:47 - 00000000 ___RD () C:\Users\DerRobag\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-05-30 19:47 - 2014-05-30 19:47 - 00000000 ____D () C:\Users\DerRobag\AppData\Roaming\Lenovo
2014-05-30 19:47 - 2014-05-30 19:47 - 00000000 ____D () C:\Users\DerRobag\AppData\Roaming\Leadertech
2014-05-30 19:47 - 2014-05-30 19:47 - 00000000 ____D () C:\Users\DerRobag\AppData\Local\VirtualStore
2014-05-30 19:47 - 2014-05-30 19:47 - 00000000 ____D () C:\Users\DerRobag\AppData\Local\Lenovo
2014-05-30 19:46 - 2014-04-28 06:37 - 00000000 ____D () C:\swshare
2014-05-09 11:16 - 2014-05-30 20:32 - 00130584 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2014-05-09 11:16 - 2014-05-30 20:32 - 00112080 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2014-05-09 11:16 - 2014-05-30 20:32 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
Some content of TEMP:
====================
C:\Users\DerRobag\AppData\Local\Temp\avgnt.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2014-05-31 09:08
==================== End Of Log ============================
--- --- --- --- --- --- --- --- --- Geändert von KingOfBug (31.05.2014 um 14:41 Uhr) Grund: Edit |
| Themen zu Nach Neustart von Windows 7 keine Aktionen (Maus+Tastatur) mehr möglich! Allerdings kein Freeze! |
| abgesicherten, antivirus, besten, comodo, ebenfalls, einträge, firewall, freeze, funktionieren, gekauft, gen, laptop, maus, neustart, neustarten, nicht mehr, norton, programm, pwmtr64v.dll, registry, revo uninstaller, system, tastatur, version, viren, windows, windows 7 |
Baum-Darstellung